1567 matches found
CVE-2017-16793
CVE-2017-16793 affects SWFTools 0.9.2, specifically the wav_convert2mono function in lib/wav.c, which does not properly validate WAV data. This can allow remote attackers to cause a denial of service via an incorrect malloc and heap-based buffer overflow when processing a crafted file. Several co...
CVE-2017-16794
The pngload function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file, as demonstrated by an erroneous...
SWFTools Denial of Service Vulnerability (CNVD-2017-36375)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A security vulnerability in the lib/modules/swfbits.c file 'swfDefineLosslessBitsTagToImage' function in SWFTools version 0.9.2 stems from the program failing to properly handle decompression failures. A remote attacker...
Null pointer dereference
The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...
CVE-2017-16711
The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...
CVE-2017-16711
The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...
CVE-2017-16711
The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...
UBUNTU-CVE-2017-16711
The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...
CVE-2017-16711
The swfDefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash because of extractDefinitions in lib/readers/swf.c and filllinebitmap...
CVE-2017-16711
The CVE-2017-16711 issue affects SWFTools 0.9.2, specifically the swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c. The root cause is mishandling an uncompress failure in the code path involving extractDefinitions (lib/readers/swf.c) and fill_line_bitmap (lib/devices/render.c), ...
CVE-2017-16711
Removed by vendor...
MGASA-2017-0245 Updated swftools package fixes security vulnerability
In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution CVE-2017-8400...
Updated swftools package fixes security vulnerability
In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function pngload in lib/png.c. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS; it might cause arbitrary code execution CVE-2017-8400...
SWFTools Denial of Service Vulnerability (CNVD-2017-15106)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfDeleteFilter' function in the lib/modules/swffilter.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointe...
SWFTools Denial of Service Vulnerability (CNVD-2017-15103)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'wavconvert2mono' function in the lib/wav.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service crash...
SWFTools Denial of Service Vulnerability (CNVD-2017-15101)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'dictlookup' function in the lib/q.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
SWFTools Denial of Service Vulnerability (CNVD-2017-15102)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'pngload' function in the lib/png.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service crash...
SWFTools Denial of Service Vulnerability (CNVD-2017-15105)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfRelocate' function in the lib/modules/swftools.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer...
SWFTools Denial of Service Vulnerability (CNVD-2017-15104)
SWFTools is a utility toolset for working with Adobe Flash files SWF files. A denial of service vulnerability exists in the 'swfFoldSprite' function in the lib/rxfswf.c file in SWFTools version 0.9.2. An attacker can exploit this vulnerability to cause a denial of service null pointer backreferen...